If you compiled the kernel, did you compile in IPTable support?
There is a little change in kernel 2.6.16. The options for IPtables
is no longer there! until you also choose the new Xtables entry
when configuring.